Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/83UsEPGw0HtfSOV539FONycT-0c.mft
File: 83UsEPGw0HtfSOV539FONycT-0c.mft (raw, json)
Hash identifier: 3FENvI5aNE+fU5polI4NgpnTmxeVHcinDMgg0MTnU1E=
Subject key identifier: DB:00:4B:1E:90:C7:AC:B9:C4:02:1D:3F:AA:77:19:10:40:AD:38:8C
Authority key identifier: F3:75:2C:10:F1:B0:D0:7B:5F:48:E5:79:DF:D1:4E:37:27:13:FB:47
Certificate issuer: /CN=f3752c10f1b0d07b5f48e579dfd14e372713fb47
Certificate serial: 0197B6A1369EC191AA8104B156458CDC5D5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/83UsEPGw0HtfSOV539FONycT-0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/83UsEPGw0HtfSOV539FONycT-0c.mft
Manifest number: 08F0
Signing time: Sat 28 Jun 2025 13:01:47 +0000
Manifest this update: Sat 28 Jun 2025 13:01:47 +0000
Manifest next update: Sun 29 Jun 2025 13:01:47 +0000
Files and hashes: 1: 83UsEPGw0HtfSOV539FONycT-0c.crl (hash: e/Oi6ZC/EnCcUFaVffi1dPQl9xDELZ/+TBQ2ZpfuvBY=)
2: kDhp1dHjDBAXX9BsUPItX2dtNTc.roa (hash: PynDqUC0SP3COf4tmeohMx6MacUGS0U4TVEP+3iExHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/83UsEPGw0HtfSOV539FONycT-0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/83UsEPGw0HtfSOV539FONycT-0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/83UsEPGw0HtfSOV539FONycT-0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:36:9e:c1:91:aa:81:04:b1:56:45:8c:dc:5d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3752c10f1b0d07b5f48e579dfd14e372713fb47
Validity
Not Before: Jun 28 13:01:47 2025 GMT
Not After : Jun 29 13:01:47 2025 GMT
Subject: CN=db004b1e90c7acb9c4021d3faa77191040ad388c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:15:17:f7:ef:11:62:da:50:7c:cb:f2:c7:5f:
df:30:d0:5e:be:0b:d2:c3:61:fc:ed:27:7b:50:cb:
9f:ea:08:4b:4c:d6:cf:07:be:7f:b5:86:06:50:ee:
6b:27:bf:fd:bc:db:56:94:cd:fd:3d:a7:40:85:ad:
00:33:b0:83:2e:56:96:63:b7:f0:56:2d:2f:78:eb:
31:2d:9c:3b:f7:c1:dd:6a:3a:e5:72:79:97:55:89:
f5:16:11:2a:6e:5b:29:e6:7e:95:1b:77:b0:0d:ff:
d3:fd:75:86:1d:bc:06:53:72:a3:e3:4c:a9:15:51:
85:23:6a:de:cc:3a:d3:08:f1:41:b1:c7:65:1f:93:
bf:e8:46:58:78:35:84:14:57:a7:2a:b9:dd:fc:ae:
90:40:14:90:09:80:9a:63:a7:a6:aa:10:3e:8a:ab:
5f:7a:e6:35:2c:46:c3:c9:3e:3f:6a:1a:b7:df:f0:
93:43:be:2e:7e:0c:00:a5:27:ad:ff:d9:ca:71:bb:
59:f0:a8:04:7f:e1:e8:19:8e:42:1d:f8:f9:f6:f1:
46:46:0a:37:09:30:f6:53:2f:9f:05:3e:7f:35:44:
ba:b7:7b:44:3b:ea:da:14:b0:0c:44:0f:e0:7b:d8:
b9:e1:bd:64:db:f2:84:a2:23:a5:da:ae:d5:42:e3:
35:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:00:4B:1E:90:C7:AC:B9:C4:02:1D:3F:AA:77:19:10:40:AD:38:8C
X509v3 Authority Key Identifier:
keyid:F3:75:2C:10:F1:B0:D0:7B:5F:48:E5:79:DF:D1:4E:37:27:13:FB:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83UsEPGw0HtfSOV539FONycT-0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/83UsEPGw0HtfSOV539FONycT-0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/83UsEPGw0HtfSOV539FONycT-0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:7b:9b:86:3d:77:4d:7f:36:61:52:47:9c:f1:46:bf:de:bc:
0b:0a:42:b1:e5:28:35:b7:36:07:37:62:a4:05:74:7e:f3:5a:
bf:cc:28:1e:ac:ec:33:11:4f:82:20:98:e6:6e:d4:5f:97:42:
e9:25:ae:d6:c4:c3:ed:03:4f:3d:0e:92:ca:32:a2:c8:9b:01:
a8:db:25:37:51:e3:b4:ac:0a:b9:2e:61:ba:01:3e:90:78:01:
35:8c:4b:b0:45:70:7a:19:bf:6c:72:f2:89:c6:6d:cc:c5:13:
83:66:4d:e3:d0:b9:a7:3f:94:ec:0e:b7:bd:ea:5a:30:6e:1d:
55:c8:2e:67:9a:16:09:b0:5c:6f:f2:f7:27:b8:65:f5:a4:b9:
dd:1f:7c:64:92:54:3f:f6:c9:60:20:62:e6:b5:a7:b2:71:a5:
e5:64:92:98:24:18:6a:7e:6a:5e:60:70:f0:ec:01:5f:fc:81:
ea:ca:c0:1c:dd:08:8b:ba:40:ab:c7:1e:1e:04:40:29:41:42:
79:93:bb:6b:c2:4f:09:31:4f:0b:9b:37:b3:28:c5:a6:51:06:
a7:51:eb:c8:48:09:d0:ec:9c:64:71:7a:55:2c:e1:0f:8f:2b:
c0:a0:2c:d7:b7:e4:e8:42:21:9e:13:60:46:38:05:f0:57:e1:
ba:7b:48:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:55:43 2025 by rpki-client